Privacy Policy

1. Data Controller

Lanxor digital services are operated by:

  • Company name: IE Olivier Thomas (Lanxor)
  • Publishing director: Thomas OLIVIER
  • Company address: 60 rue François 1er, 75008 Paris, France
  • Email address: contact@lanxor.fr
  • SIREN number: 100 158 476
  • VAT: VAT not applicable, Article 293 B of the French General Tax Code
  • GDPR contact email: privacy@lanxor.fr

The data controller is Thomas OLIVIER.

2. Scope

This Privacy Policy applies to:

  • the Lanxor corporate website;
  • all services, applications, and application programming interfaces (APIs) operated by Lanxor;
  • as well as any related digital products, tools, or services offered by Lanxor, whether existing or future.

3. Data collected

Depending on your use of Lanxor services, we may collect and process different categories of personal data.

3.1 Contact data

  • first and last name;
  • email address;
  • content of messages submitted through contact forms or direct communication.

3.2 User account data

When you create an account on a Lanxor service:

  • email address;
  • user identifier;
  • information related to account creation and management;
  • login history;
  • subscription or service level information.

3.3 Technical and usage data

When using our services, we may collect:

  • IP address;
  • browser and device information;
  • operating system;
  • connection logs;
  • service usage logs (technical logs, requests, errors);
  • data required for security, abuse prevention, and service maintenance.

3.4 Billing and commercial data

  • name or company name;
  • billing address;
  • VAT identification number (if applicable);
  • subscription and transaction history;
  • invoices and related accounting documents.

4. Purposes of processing

Data is collected and processed for the following purposes:

  • providing and operating Lanxor services;
  • managing user accounts;
  • authenticating and securing access;
  • processing subscriptions and payments;
  • issuing invoices and managing accounting records;
  • improving service quality and performance;
  • ensuring security and preventing abuse;
  • handling support requests;
  • complying with legal and regulatory obligations.

Processing is based on one or more of the following legal grounds:

  • performance of a contract;
  • compliance with legal obligations;
  • legitimate interest of Lanxor in ensuring the security, maintenance, and improvement of its services;
  • consent where required.

6. Analytics

The Lanxor website uses Umami Analytics in a self-hosted configuration.

This solution is used without cookies and solely for the purpose of measuring website traffic and usage.

The collected statistics are aggregated and do not aim to directly identify visitors.

7. Service providers and processors

In order to provide its services, Lanxor may use external service providers acting as data processors under applicable data protection regulations.

These providers may be involved in, among others:

  • user authentication and account security;
  • payment processing and subscription management;
  • invoicing and billing operations;
  • technical services required for platform operation and security;
  • hosting and operation of certain technical components of the services.

These processors are carefully selected and are required to provide appropriate guarantees regarding confidentiality, security, and compliance with the General Data Protection Regulation (GDPR).

Lanxor remains responsible for the processing of personal data and ensures that its processors comply with their legal obligations.

8. Hosting and data security

Lanxor services are operated on technical infrastructure located primarily within the European Union.

Lanxor implements appropriate technical and organizational measures to ensure the confidentiality, integrity, and availability of personal data.

These measures include, among others:

  • system access security;
  • encryption of communications;
  • logging of access and security events;
  • infrastructure monitoring;
  • backup and recovery procedures.

Personal data is accessible only to authorized persons when necessary for operation, maintenance, security, or support of the services provided by Lanxor.

9. International transfers

Some service providers used by Lanxor may belong to international groups or process certain data outside the European Union.

Where such transfers occur, they are governed by mechanisms provided under applicable regulations, including the Standard Contractual Clauses adopted by the European Commission or other recognized equivalent safeguards.

10. Data retention

Personal data is retained only for as long as strictly necessary for the purposes for which it was collected, in accordance with applicable regulations.

Retention periods are as follows:

  • User account data: retained for the duration of service use. In case of prolonged inactivity, certain data may be retained for up to three (3) years from the last activity, unless deletion is requested or legally required otherwise.
  • Billing and accounting data: retained for ten (10) years in accordance with applicable legal and tax obligations.
  • Technical data and security logs: retained for a maximum period of one (1) year for security, abuse prevention, and access traceability purposes.
  • Contact request data: retained for up to three (3) years after the last interaction.

After these periods, data is either deleted or irreversibly anonymized, unless legal retention obligations apply or retention is necessary for defending Lanxor’s rights.

11. Security

Lanxor implements appropriate security measures including:

  • encrypted communications;
  • access control mechanisms;
  • monitoring and logging;
  • backups;
  • infrastructure protection.

However, no system is entirely risk-free, and Lanxor cannot guarantee absolute security.

12. Data subject rights

In accordance with applicable regulations, you have the following rights:

  • right of access;
  • right to rectification;
  • right to erasure;
  • right to restriction of processing;
  • right to object;
  • right to data portability where applicable.

You may exercise your rights by contacting:

privacy@lanxor.fr

You will receive a response within the timeframe required by applicable law.

13. Complaints

If you believe your rights have not been respected, you may lodge a complaint with the French Data Protection Authority (CNIL).

14. Changes

Lanxor may update this Privacy Policy to reflect legal, regulatory, or technical developments.

The current version is the one published on the relevant websites at the time of consultation.

Last updated: 2026-06-19